$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft File: CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json) Hash identifier: T+kCy7t45fMAfDcBb9zSeDvy4zptzeyYnWr9mR4oUHE= Subject key identifier: 42:ED:87:20:23:BF:57:B8:58:F8:C8:4C:F6:6F:1C:A6:3B:D6:CC:79 Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 Certificate issuer: /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Certificate serial: 11C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft Manifest number: 11B1 Signing time: Tue 04 Nov 2025 17:17:59 +0000 Manifest this update: Tue 04 Nov 2025 17:17:58 +0000 Manifest next update: Tue 11 Nov 2025 17:17:58 +0000 Files and hashes: 1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: RNaiGC4FbD71Dibppz9pu2+0VVAnNJ70BT0JehZZsp8=) 2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=) 3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=) 4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4549 (0x11c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790 Validity Not Before: Nov 4 17:17:58 2025 GMT Not After : Nov 11 17:17:58 2025 GMT Subject: CN=690a3547-2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:31:b5:e4:03:e1:80:e2:aa:47:6d:ca:03: 8b:8b:c6:27:77:6b:6f:12:fa:e7:78:a2:83:4a:51: 44:38:0d:c4:6c:42:0f:49:55:65:77:3d:c0:31:ad: 2b:20:8e:2b:f8:81:7f:9c:42:5a:09:8e:e2:f5:e9: c1:22:9c:ad:cb:1b:06:47:40:fa:f8:81:9f:d4:06: 6f:dd:2b:c6:f5:30:76:16:a3:0f:eb:1b:c7:ab:7d: e2:bb:78:10:1a:35:97:1b:10:99:2b:70:7f:02:a2: 14:d2:e3:b2:79:08:a3:70:2c:38:82:60:6c:06:2f: ea:81:5e:6b:45:6f:69:c4:02:38:8d:d2:eb:89:f7: c5:49:80:f9:13:38:46:77:4d:c5:7f:56:44:ac:53: 20:3e:5c:15:2a:c1:2f:f1:ae:2c:52:e3:20:35:90: b7:76:98:c9:59:17:b2:c2:c3:a6:00:e7:76:97:48: 79:44:db:61:79:26:6e:00:62:02:78:cf:2a:8b:6e: d1:49:cf:87:cd:94:3d:60:87:17:18:84:60:c1:c4: b0:87:af:15:91:e0:e2:c2:a2:6e:89:f1:35:3e:e1: a9:96:9b:2a:6c:23:de:ed:e7:27:25:5c:67:af:29: 84:dd:9a:ab:93:49:32:9b:af:c1:af:76:35:fc:00: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:ED:87:20:23:BF:57:B8:58:F8:C8:4C:F6:6F:1C:A6:3B:D6:CC:79 X509v3 Authority Key Identifier: keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e1:fb:ee:02:c5:6f:6d:a6:87:5c:ad:b5:ab:67:7e:76:51: 30:f1:9f:63:e5:6c:69:f7:90:83:5c:12:0c:61:8e:44:7d:23: 6e:60:12:43:45:23:53:64:14:14:5b:b7:df:f0:f3:c2:5e:5d: 1c:d9:d1:95:04:a5:04:04:a1:5c:85:66:01:d4:92:99:32:19: 26:a0:99:19:59:06:4b:2d:3e:fc:02:78:75:a5:64:ee:63:ca: 25:62:61:86:a7:88:ae:1b:e2:2d:37:ba:54:0f:1d:93:fe:6b: 98:6f:1c:5a:92:25:36:76:e6:74:9c:fe:63:b9:21:d6:bc:0b: 74:85:0e:ff:94:6b:d7:f3:0b:cd:ce:07:e4:4b:1e:72:20:35: 42:0b:df:d9:6e:4c:a3:54:91:31:94:11:7a:64:40:0c:1f:4b: fd:bf:01:a3:a9:cd:09:d0:93:dd:1a:d3:b4:e1:78:19:04:61: 42:a8:7b:a0:68:6b:40:4f:a8:33:44:09:f5:5e:05:99:4a:10: 80:1b:59:9a:29:83:89:fe:04:80:e2:b5:bb:c9:89:a7:9c:c2: f8:10:cb:60:91:12:cd:4f:7c:e2:68:68:e4:1a:95:3b:c9:ca: 6b:e4:83:cf:6c:82:85:a4:84:6a:c2:c5:6c:36:88:60:76:41: 40:59:a6:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx NTgyOUY3OTAwHhcNMjUxMTA0MTcxNzU4WhcNMjUxMTExMTcxNzU4WjAYMRYwFAYD VQQDEw02OTBhMzU0Ny0yZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOIxteQD4YDiqkdtygOLi8Ynd2tvEvrneKKDSlFEOA3EbEIPSVVldz3AMa0r II4r+IF/nEJaCY7i9enBIpytyxsGR0D6+IGf1AZv3SvG9TB2FqMP6xvHq33iu3gQ GjWXGxCZK3B/AqIU0uOyeQijcCw4gmBsBi/qgV5rRW9pxAI4jdLriffFSYD5EzhG d03Ff1ZErFMgPlwVKsEv8a4sUuMgNZC3dpjJWReywsOmAOd2l0h5RNtheSZuAGIC eM8qi27RSc+HzZQ9YIcXGIRgwcSwh68VkeDiwqJuifE1PuGplpsqbCPe7ecnJVxn rymE3Zqrk0kym6/Br3Y1/ABKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELthyAj v1e4WPjITPZvHKY71sx5MB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1 OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5 NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjYwMC85RjYxNUJCRTA1OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJI N3ZyODFTenlZYzBWZ3A5NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd4fvuAsVvbaaHXK21q2d+dlEw8Z9j5Wxp95CDXBIMYY5EfSNuYBJD RSNTZBQUW7ff8PPCXl0c2dGVBKUEBKFchWYB1JKZMhkmoJkZWQZLLT78Anh1pWTu Y8olYmGGp4iuG+ItN7pUDx2T/muYbxxakiU2duZ0nP5juSHWvAt0hQ7/lGvX8wvN zgfkSx5yIDVCC9/ZbkyjVJExlBF6ZEAMH0v9vwGjqc0J0JPdGtO04XgZBGFCqHug aGtAT6gzRAn1XgWZShCAG1maKYOJ/gSA4rW7yYmnnML4EMtgkRLNT3ziaGjkGpU7 ycpr5IPPbIKFpIRqwsVsNohgdkFAWaYn -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:35 2025 by rpki-client